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Foreword 

This Technical Specification (TS) has been produced by ETSI Technical Committee Telecommunications and Internet 
converged Services and Protocols for Advanced Networking (TISPAN). 



Introduction 

The present document defines Release 2 of an anticipated series of releases of TISPAN NGN. Release 2 extends the 
capabilities of Release 1, enhances some Release 1 capabilities and provides some new services. The TISPAN NGN is 
described in terms of the content capabilities and this release (Release 2) is defined by the documentation set and the 
features that these support. 

Clause 4 provides a general description of an NGN, and the TISPAN Release 1 NGN in particular. The general 
objective of Release 2 is to extend Release 1 through enhancements and new services. The present document focuses on 
additional capabilities and services and continues to enable an NGN to be a flexible platform allowing future 
enhancements and releases. 

The TISPAN NGN is specified using a release mechanism. The present document provides an overview of the 
capabilities in the second release. No assumptions should be made about future releases. 

Throughout the present document, references to NGN are assumed to be references to TISPAN NGN unless otherwise 
indicated. 
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Scope 



The present document provides an overview of Customer Network Gateway (CNG) functional architecture and 
reference points and the way it interacts with an NGN, as described in ETSI TISPAN Release 1 and Release 2 standards 
(see ES 282 001 [1]). 

The present document describes architectural building blocks to be included in the CNG to support the interworking 
with an NGN, both at the transfer, transport and service layers. It also defines the reference points between the CNG 
internal architectural blocks involved and a CND. 

The WG5 does not address the layer 1 issues, as such studies refer to the AT&TM Group. 



References 



References are either specific (identified by date of publication and/or edition number or version number) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• Non-specific reference may be made only to a complete document or a part thereof and only in the following 
cases: 

if it is accepted that it will be possible to use all future changes of the referenced document for the 
purposes of the referring document; 

for informative references. 

Referenced documents which are not found to be publicly available in the expected location might be found at 
http://docbox.etsi.org/Reference . 

For online referenced documents, information sufficient to identify and locate the source shall be provided. Preferably, 
the primary source of the referenced document should be cited, in order to ensure traceability. Furthermore, the 
reference should, as far as possible, remain valid for the expected life of the document. The reference shall include the 
method of access to the referenced document and the full network address, with the same punctuation and use of upper 
case and lower case letters. 

NOTE: While any hyperlinks included in this clause were valid at the time of publication ETSI cannot guarantee 
their long term validity. 

2.1 Normative references 

The following referenced documents are indispensable for the application of the present document. For dated 
references, only the edition cited applies. For non-specific references, the latest edition of the referenced document 
(including any amendments) applies. 

[1] ETSI ES 282 001: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); NGN Functional Architecture". 

[2] ETSI ES 282 003: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); Resource and Admission Control Sub-system (RACS); 
Functional Architecture". 

[3] ETSI ES 282 004: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); NGN Functional Architecture; Network Attachment 
Sub-System (NASS)". 

[4] ETSI ES 282 007: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); IP Multimedia Subsystem (IMS); Functional architecture". 



ETSI 



7 ETSI TS 1 85 003 V2.0.0 (2008-03) 

[5] ETSI ES 283 003: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); IP Multimedia Call Control Protocol based on Session 
Initiation Protocol (SIP) and Session Description Protocol (SDP) Stage 3 [3GPP TS 24.229 
(Release 7), modified]". 

[6] ETSI TS 182 012: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); IMS-based PSTN/ISDN Emulation Subsystem; Functional 
architecture". 

[7] ETSI TS 183 019: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); Network Attachment; User-Network Interface Protocol 
Definitions". 

[8] IETF RFC 3261 : "SIP: Session Initiation Protocol". 

[9] IETF NAPT traversal Working Groups: BEHAVE for STUN TURN methods, MMUSIC for ICE, 

SIP for SIP Outbound. 

[10] ETSI TS 131 103: "Digital cellular telecommunications system (Phase 2+); Universal Mobile 

Telecommunications System (UMTS); Characteristics of the IP Multimedia Services Identity 
Module (ISIM) application (3GPP TS 31.103)". 

[11] IETF RFC 2131: "Dynamic Host Configuration Protocol" . 

[12] ETSI TS 124 229: "Digital cellular telecommunications system (Phase 2+); Universal Mobile 

Telecommunications System (UMTS); Internet Protocol (IP) multimedia call control protocol 
based on Session Initiation Protocol (SIP) and Session Description Protocol (SDP); Stage 3 
(3GPP TS 24.229 version 8.2.0 Release 8)". 

[13] ETSI TS 185 006: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); TISPAN Customer Devices architecture and interfaces". 

2.2 Informative references 

[14] ETSI TR 185 007: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); Analysis of protocols for customer networks connected to 

TISPAN NGN". 

[15] ETSI TR 185 004: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); High level customer network architectures". 

[16] HGI Forum TR-069: "CPE WAN Management Protocol". 

[17] HGI Forum TR-098: "Data Model for TR6069". 

[18] HGI Forum TR-104: "Provisioning Parameters for VoIP CPE". 

[19] ETSI TS 185 005: "Telecommunications and Internet converged Services and Protocols for 

Advanced Networking (TISPAN); Services requirements and capabilities for customer networks 
connected to TISPAN NGN". 



3 Definitions, symbols and abbreviations 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply: 

CPN Device: device that is physically installed in the CPN allowing user access to network services; this can be a 
Customer Network Gateway with gateway functionalities towards the NGN, or a Customer Network Device being the 
end user terminal 
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Customer Network Device (CND): CPN device enabling the final user to have direct access to services through a 
specific user interface 

NOTE: CNDs can be dedicated to the internet, conversational and audio-video services. But they could be also 
Consumer Electronics equipment and other devices which may have nothing to do with these premium 
services (e.g. services performing a content sharing within a CPN, typically between a PC and a music 
system). 

Customer Network Gateway (CNG): CPN device acting as a gateway between the CPN and the NGN 

NOTE: CNG is able to perform networking functions from physical connection to bridging and routing 

capabilities (L1-L3), but also possibly implementing functions related to the service support (up to L7). 

Customer Premises Network (CPN): in-house network composed by customer network gateway, customer network 
devices, network segments, network adapters and nodes 

NOTE: Network segments are physical wired or wireless connections between customer premises network 
elements); network adapters are elements performing a L1/L2 conversion between different network 
segments; nodes are network adapters with L3 routing capabilities. 

IMS CND: CND whose external behavior complies with the IMS specifications 

NOTE: See [1], [2], [3], [4] and [5]. 

"Multiple" Play Services (can be: double, triple, quadruple etc.): delivery by a single service provider of different 
types of concurrent services to one or multiple users within the same CPN 

NOTE: Services can be categorised in the following way: data (e.g. Web browsing, best effort traffic etc.), 
person(s) to person(s) communication, entertainment. 

Non-IMS SIP IETF CND: SIP-based CND whose external behavior conforms to RFC 3261 [8] but do not fully 
conform to the IMS specifications 

Many scenarios are expected to provide one service from a service provider to a customer device (case of multiple 
service providers, one or several CNG, etc.). They are presented within the TR 185 004 [15] and TS 185 005 [19]. 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

ACS Auto-Configuration Server 

AKA Authentication and Key Agreement 

ALG Application Layer Gateway 

A-MGF Access-Media Gateway Function 

ARE Access Relay Function 

B2BUA Back-to-Back User Agent 

CLE Connectivity session Location and repository Function 

CND Customer Network Device 

CNG Customer Network Gateway 

CNG- ACE CNG- Admission Control Function 

CNG-AtE CNG- Attachment Function 

CNG-AuF CNG- Authentication Function 

CNGCF CNG Configuration Function 

CNG-CME CNG-Configuration and Maintenance Function 

CNG-CSMF CNG- Communication Services Media Function 

CNG-LF CNG-Location Function 

CNG-NFF CNG-NAPT and Firewall Function 

CNG-PCF CNG-PoHcy Control Function 

CNG-PPF CNG-Plug and Play Function 

CNG-UIF CNG-User Reference point Function 

CPN Customer Premises Network 
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DHCP 



Dynamic Host Configuration Protocol 



NOTE: http://www.ietf .org/rfc/rfc3235 .txt?number=2 1 3 1 



EF 

ETH 

IMS 

ISIM 

ISIM 

MGC 

NACF 

NAPT 



Elementary Files 

Ethernet 

IP Multimedia Subsystem 

IMS Subscriber Identity Module 

IMS Subscriber Identity Module 

Media Gateway Controller 

Network Access Configuration Function 

Network Address and Port Translation 



NOTE: http://www.ietf.org/rfc/rfc3235.txt?number=3235 

NASS Network Attachment Subsystem 

P-CSCF Proxy Call Session Control Function 

PLT Power-Line Telecommunication 

SIP Session Initiation Protocol 

SSID Service Set Identifier 

UE User Equipment 

UICC Universal Integrated Circuit Card 

VGCF Voice Gateway Control Function 



4.1 



The CNG Architecture 



Introduction 



The following clauses present the functional entities for the CNG. Examples of Customer Network Devices may be 
connected to the CNG: 

a) Analog phones connected through the CNG to the NGN network. 

b) IMS Customer Network Devices connected through a CNG to the NGN network [5]. 

c) Non IMS SIP IETF Customer Network Devices [7]. 

d) ISDN Customer Network Devices through the CNG to the NGN network. 

Different types of Customer Network Devices may be involved in Intra CPN communication through a CNG. 

The list of Customer Network Devices which are likely to be connected to the CNG is provided by the TS 185 006 [13]. 

The general overview of the CPN Architecture is provided by the TR 185 004 [15]. The CNG functional entities are 
described in the following parts of the document, as well as the reference points between each function. 

4.2 CPN and NGN side requirements 

The list of the CNG requirements is provided by the TS 185 005. specification for Service requirements and capabilities 
for customer networks connected to TISPAN NGN. 

4.2.1 Analog phone connected to the NGN through a CNG 

In this case, the CNG includes all the CPN functionalities necessary to fulfill a service between the analog phone and 
the NGN, as shown in figure 1 . 
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The CPN Environment 

Customer Network Gateway 



Z 
< ► 



Analog 
CND 



CNG 



Voice Gateway Control Functions (VGCF) 




U 



L CNG-Communication Services Media Function (CNG-CSMF) 



X 



CNG-IPTV Functions (CNG-IPTVF) 



X 



CNG-Policy Control Function (CNG-PCF) 



CNG-Configuration & Management Function (CNG-CMF) 



CNG-Location Function (CNG-LF) 



CNG-Attachment Function (CNG-AtF) 



the NGN and IMS entities 



UIGC 






ISIM 








Exchanges inside the CNG 



-► Network attachment functions 



-► Transport plane functions 



-► Service plane and applicative functions 



Figure 1 : Analog phone connected to the NGN-IMS network through a CNG 

4.2.2 IMS Customer Network Device connected to the NGN through a 
CNG 

In this case, the Customer Network Device includes all the CPN functionalities necessary to fulfill a service between 
itself and the NGN-IMS network, as shown in figure 2. 



ETSI 



11 



ETSI TS 185 003 V2.0.0 (2008-03) 



LAN side : 
the User Equipment 



WAN side : _ 

the NGN and IMS 
entities 




Exchanges inside the CNG 



"► Network attachment functions 



-► Transport plane functions 



< ► Service plane and applicative functions 

NOTE: The IMS CND functions are described within the TS 185 006 [13] dedicated to Customer Network Devices. 
Figure 2: IMS Customer Network Device connected to the NGN-IMS network through a CNG 



4.2.3 SIP-non IMS Customer Network Device connected to the NGN 
through a CNG 

In this case, the Customer Network Gateway includes all the CPN functionalities necessary to fulfill a service between 
itself and the NGN-IMS network, as shown in figure 3. 
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LAN side : 
the User Equipment 



Customer Network Device 



CND 



CND-Plug and Play Function (CND-PPF) 



Customer 



I Gust 
1 Customer! 



Customer 
"Application 



CND-Self Provisioning (CND-SP) 



CND-Communication Services Media 
Function (CND-CSMF) 



CND-NAPT Traversal Function (CND-NTF) 



CND-Configuration & Management 

Function (CND-CMF) ^ 



CND-Local Authentication Function (CND-LAF) 



CND-Attachment Function (CND-AtF) 



WAN side : _ 

tlie NGN and IMS 
entities 




Exchanges inside the CNG 



-► Network attachment functions 



Transport plane functions 



-► Service plane and applicative functions 



Figure 3: Non IMS SIP Customer Network Device connected to the NGN-IMS network through a CNG 

In this case G^^ is used, the SIP proxy B2BUA shall perform an adaptation of the non-IMS SIP profile from a CND 
which requests for an IMS session. 

4.3 CNG functions 

4.3.1 The transfer level functions 



4.3.1.1 



CNG-NFF: CNG-NAPT and Firewall Function 



The CNG-NFF entity shall provide gate control functionality i.e. dynamic NAPT and firewall functions at the boundary 
between the CPN and the NGN. 
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4.3.2 The transport level functions 

4.3.2.1 CNG-CSMF: CNG-Communication Services Media Function 

The CNG-CSMF is the termination point for the access node, it shall perform an adaptation so as to deliver media flows 
from the NGN network to an analog or IP Customer Network Device. 

The CNG-CSMF is used for analog (or digital in the case of ISDN CNDs) to IP media conversion - in which case it 
corresponds to the R-MGF identified in ES 282 001 [1] or it is used for IP-IP media traffic. 

As a result, this functionality is recommended. 

4.3.2.2 CNG-IPTVF: CNG-IPTV Function 

When supporting IPTV services, the CNG shall be able to forward inbound multicast packets only to the physical 
interfaces connected to devices that have joined the specific multicast group. This mechanism should be implemented 
acting on layer 2 and layer 3 multicast signaling flows (e.g. IGMP based). 

The CNG shall be able to perform a link layer multicast to unicast translation, if the CPN segment, which the IPTV 
CND is connected to, is not able to support multicast; specifically, when sending an IP multicast packet to a 
host received on an NGN reference point, the CNG can send the packet to the unicast MAC address of the host 
(contained in the multicast signalling message without any change in the IP destination address). This mechanism is 
also of interest for example when the IPTV CND is connected to the CNG through Powerlines technology (directly or 
using ETH-to-PLT bridges). 

4.3.3 The CNG Network Attachment Subsystem entities (CNG-NASS) 

4.3.3.1 CNG-CMF: CNG-Configuration and Management Function 

The CNG-CMF shall manage a mutual authentication between the CNGCF and the CNG. 

The CNG-CMF shall enable the CNG configuration and firmware upgrade. 

The CNG-CMF entity should enable transmission of configuration information to CNDs, obtained from the CNGCF. 
As a result the CNG-CMF should be able particularly to store configuration information dedicated to several CND, after 
sending only one request to the CNGCF. As soon as a CND is connected, the CNG-CMF should be able to deliver 
configuration parameters to it. 

Furthermore, the CNG-CMF should allow maintenance of any CPN device (CNG/CND) from the NGN network, 
through the CND-CMF, that is to say the opportunity to do diagnostic and performance tests too. Functionalities should 
be added to the CNGCF, whether this latter entity could perform the CPN maintenance. 

For instance, the CNG-CMF could provide the functionality and reference points of a DSL Forum Auto Configuration 
Client (see TR-069 [16]). 

Moreover, the CNG-CMF may be able to perform management activities related to remote access. The remote access 
allows the user to access a CND from another device via the Internet through the Gj^ reference point, and work on it 
remotely. 

Some authentication parameters may be stored in a UICC (containing the ISIM). 

4.3.3.2 CNG-AtF: CNG-Attachment Function 

The CNG-AtF entity shall be responsible for allocation of IP addresses to user premises equipment (CND), and to the 
CNG from the NACF via the ARF. 

4.3.3.3 CNG-PCF: CNG-Policy Control Function 

The CNG-PCF may integrate a database containing the access profile. 
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This includes bandwidth and QoS parameters for the CNG Customer Network Device side applications and terminals, 
which could be configured by a user. For instance, congestion issues within the CPN may be solved defining resources 
for several SSID. 

4.3.3.4 CNG-AuF: CNG-Authentification Function 

The CNG-AuF shall manage the authentication of CNDs to be connected to the CPN. A CND requesting for a CPN 
Wireless attachment should be authorized by the access point embedded in the CNG. 

The CNG-AuF may thus be configured by the user for such a case, using the CNG-User Interface Function (CNG-UIF). 

4.3.3.5 CNG-LF: CNG-Location Function 

The CNG-LF functional entity may allow an internal application providing location information, to perform for instance 
emergency calls or deliver some local video content. 

This information may be configured by the owner of the CNG, received from the CLF or obtained from the network, 
via the CNG-AtF (typically through DHCP option 82). 

The information should also come from the CLF. In this case the CNG-LF may not be used. 

4.3.4 The CNG-Resource and Admission Control Functional 
entities (C-RACF) 

4.3.4.1 CNG-ACF: CNG-Admission Control Function 

The CNG-ACF should receive and send QoS messages from/to the CNG-SIP proxy B2BUA Function. In particular it 
should: 

a) check resources availability on each link/device involved in the communication requesting a QoS 
reservation/allocation, through an internal database; 

b) perform the appropriate resources reservation, through the CNG-PCF. 

Thus, the CNG-ACF should manage session limitations for instance or the priority of media streams. This applies to 
upstream flows but there may also be an opportunity to do so for downstream flows. 

4.3.5 The CNG-Service-related Functional entities (CNG-SF) 

Depending on the services supported, a CNG may include one or more Service-related Functions. The present version 
of the present document identifies four types of SCFs intended to support SIP-based applications. It should be noted that 
not all applications require a Service-related Function to be involved (e.g. P2P applications usually do not require such 
functions). 

4.3.5.1 VGCF: Voice Gateway Control Function 

The VGCF within the CNG is the equivalent of an MGC embedding a SIP User Agent. A CNG should include several 
UAs in case of multi analog and/or ISDN Customer Network Device within the CPN. The VGCF should control the 
CNG-CSMF (i.e. the R-MGF as defined in ES 282 001 [1]). 

The VGCF should perform the service authentication and manage signaling flows securely. 

NOTE: The VGCF together with the CNG-CSMF provides the function of a R-VGW as defined in 
TS 182 012 [6]. 

In case of AKA authentication, the VGCF shall have access to the authentication parameters through an ISIM/UICC 
functionality. To be noticed that HTTP Digest is for an early deployment whereas IMS AKA is the target solution. 
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4.3.5.2 CNG-SIP Proxy B2BUA Function 

The CNG-SIP Proxy B2BUA should implement: 

a) a Local SIP Registrar without any authentication needed; 

b) an outbound SIP Proxy, a SIP access point for the P-CSCF, forwarding the register messages to the P-CSCF if 
necessary; 

Moreover, it may be: 

c) a protocol adaptation module performing an adaptation of non-IMS compliant IETF SIP protocols towards one 
IMS compliant SIP protocol. This functionality could also be performed by the NGN. 

NOTE: Some adaptation may be performed by the CNG so as to support non-IETF SIP CNDs in the CPN 
(proprietary SIP) but this case is out of the scope of the present document. 

The CNG-SIP Proxy B2BUA Function should be aware of each SIP CND capability within the CPN environment. 

The CNG-SIP Proxy B2BUA Function shall at last be able to manage two SIP dialogues and the associated identities 
(possibly through an ISIM module), from both the NGN and the CND sides. This gives the opportunity to transfer an 
IMS session from a device to another or to forward an incoming call to the appropriate CNDs (forking). 

In case of AKA authentication, the SIP Proxy B2BUA shall have access to the authentication parameters through an 
ISIM/UICC functionality. To be noticed that HTTP Digest is for an early deployment whereas IMS AKA is the target 
solution. 

4.3.5.3 CNG-PPF: CNG-Plug and Play Function 

The CNG-PPF may obtain some CND information (service discovery, description) and allow their control. 

Also, the CNG-PPF should allow a communication between many types of Customer Network Device within the CPN, 
not only conversational (based on UPnP for instance). 

The CNG-PPF may also support this kind of communication through the CNG between NGN devices and CND 
devices. 

While facilitating such communication, ALG functionality may be needed by the CNG-PPF, interfacing the CNG-NFF. 

Since some of the communication sessions supported by the CNG-PPF result in media sessions, the CNG-PPF may 
need to interface the CNG- ACE in order to support QoS provisioning for these types of services. 

When sessions (for example UPnP based) are initiated between a CND and a remote NGN device, these sessions may 
be established "wrapped" by IMS SIP session establishment and are then described in the SDP parts of the IMS SIP 
signalling. When establishing the UPnP session between the NGN and CPN endpoints the CNG-PPF needs to perform 
ALG functionality, by re-writing any CPN references within the UPnP messages and also control port forwarding 
through the CNG-NFF. Informative flows for the Remote Access feature are detailed in clause 7.4. 

4.3.5.4 CNG-UIF: CNG-User Interface Function 

The CNG-UIF entity should allow the user to configure many CNG parameters for the transport layer: 

a) firewall rules, possibly defined for each user (e.g. parental control); 

b) CNDs authorized within the CPN, with possible bandwidth restrictions. 

The operator shall be able to prevent a user from modifying a specific subset of CPN parameters. 
Thus this entity may have reference points with the CNG-AuF and the CNG-NFF of the CNG. 
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4.3.5.5 



ISIM module 



The ISIM (see figure 4) is a network access application dedicated to IMS access contained in a UICC. It may be 
implemented in a CNG. 















UICC card 


SIM Application 1 
USIM Application 








^m 




ISIM Application 


iS 
^ 







Figure 4: Example of "UICC Card composition" 

The ISIM includes: 

a) The IMPI (IMS private identity). 

b) At least one IMPU (IMS public Identity). 

c) The operator's NGN Domain Name. 

d) Support for sequence number checking in the context of the IMS Domain. 

e) The same framework for algorithms as specified for the USIM applies for the ISIM. 

f) An authentication element so as to support the AKA authentication. 

The ISIM is located in the ISIM Application Dedicated File (ADFISIM) and contains service and network related 
information. The ADFISIM provides various data contained in Elementary Files (EF), for instance the EFIMPI 
containing the private user identity. Details about this file structure can be found in TS 131 103 [10]. 



5 The CNG Reference points 

5.1 CND side Reference points 

5.1 .1 Network attachment reference points 



5.1.1.1 



Gi reference point 



The e^' reference point is defined between the CND and the CNG-AtF. The CNG-AtF provides IP addresses (IPv4 or 
IPv6 format) to the CND through the CND-AtF, it may also send some configuration information for the CND 
(typically through DHCP). 

The CND and CNG shall mutually exchange their identities (e.g. MAC address, DevicelD, etc.) on e^' reference point. 
The CNG has to know which CNDs are behind itself within the CPN and each CND has to know its CNG. 

This reference point is mandatory if the CNG runs in a routed mode 
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5.1 .1 .2 03 reference point 



The 63' reference point is defined between the CND and the CNG-CMF. The CNG-CMF may provide the CND with 
parameters that are pre-configured in the CNGCF and sent to the CNG through the e3 reference point or, as an 
alternative, directly defined by the user. The CNG-CMF also configures the CNG, using information received from the 
CNGCF or supplied by the user himself. 

The CND should provide information on CND status to allow the CNGCF to make some diagnostic and performance 
tests through the CNG-CMF. 

To sum up, the e3' reference point supports a variety of functionality to manage a collection of user equipment 
(CNG/Customer Network Devices), including the following capabilities: 

a) auto-configuration and dynamic service provisioning; 

b) software/firmware management; 

c) status and performance monitoring; 

d) diagnostics. 

This reference point is recommended as the e3 reference point could also be used. 

The above mention functionalities can be also implemented directly using a direct e3 reference point between CND and 
CNGCF as an e3 reference point defined in ES 282 004 [3]. 

The direct reference point between CND and CNG, e3', could be limited to service provisioning functions; this may be 
used as an alternative to the corresponding functionalities on the e3 reference point between CND and CNGCF. 

5.1 .1 .3 a^ reference point 

The a^ reference point is defined between the Customer Network Device and the CNG-AuF. There may be two types of 
authentication/authorization, according to: 

a) CPN pairing (attachment, encryption and security processes (WEP, WPA2, etc.)) based on specific CPN 
technologies (e.g. Wifi SSID, PLC technology). 

b) Access rights for some LAN services like the CNG Configuration (through the CNG-UIF). 

This reference point is recommended, except if a wireless access point is embedded in the CNG in which case it is 
mandatory. 

5.1 .2 Transport level reference points 
5.1 .2.1 Dj reference point 

The D: reference point is responsible for the exchange of media flows between the User Equipment (CNG or CND) and 
the access node. 

This reference point is mandatory. It is based on the ES 282 001 [1] specification. 

5.1 .3 Service-related reference points 
5.1 .3.1 GJ reference point 

The Gj^ reference point supports the communication between a CND and the CNG, e.g. related to registration and 
session control. 
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The difference between G^^ and G^^ is related to the conformance to the IMS and to the need to go through the B2BUA 
to support local services. Further details about Gm' possible implementations can be found in the TR 185 007 [14]. 

This reference point is recommended. 

5.1 .3.2 u reference point 

The u reference point gives the possibility to one or several users authorized (via the CNG-AuF) to have access to the 
CNG Configuration, through the CNG-UIF. The liaison should be as secure as possible (using HTTPs for instance). 

This reference point is recommended . 

5.1 .3.3 C reference point 

The C reference point is defined between the CNG-PPF and the CND-PPF 

It provides some CND information (service discovery, description) to the CNG and allow its control. 

Also, a communication between many types of Customer Network Device within the CPN may be established through 
the C reference point, using UPnP for instance. 

This reference point is optional. 

5.2 NGN side Reference points 
5.2.1 Network attachment reference points 

5.2.1 .1 Oi reference point 

This reference point is based on the TS 183 019 [7] specification. 

The e^ reference point is dedicated to the network attachment of the User Equipment. 

The e^ reference point is mandatory (in coherence with WG2 specifications). 

5.2.1 .2 Os reference point 

This reference point is based on the ES 282 004 [3]. 

The e3 reference point is defined between the CNG-CMF and the CNGCF and should be extended also between the 
CNG-CMF and the CND for configuration purposes. 

Through a remote management protocol it is possible to support a variety of functionalities to manage a collection of 
user equipment (CNG/Customer Network Devices), including the following capabilities: 

a) auto-configuration and dynamic service provisioning. 

b) software/firmware management. 

c) status and performance monitoring. 

d) diagnostics. 

The e3 implementation between the CNG-CMF and the CNGCF is mandatory (in coherence with WG2 specifications), 
whereas the c^ implementation between the CNG-CMF and the CND-CMF is recommended, as e3' should be an 
alternative. 
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5.2.2 Service-related reference points 

5.2.2.1 Gm reference point 

The Gj^ reference point supports the communication between UE and the IMS, e.g. related to registration and session 
control. 

Gj^ between the P-CSCF and the SIP proxy B2BUA is used to support several actions: 

a) send SIP messages to/from the NGN. 

b) call forking at the CNG level. 

The protocol used for the G^^ reference point is SIP. 

To be noticed that the definition is extracted from the ES 282 007 [4]. 
This reference point is in line with the following specifications: 

a) ES 283 003 [5]. 

b) TS 182 012 [6]. 

c) TS 131 103 [10]. 

This reference point is mandatory (in coherence with WG2 specifications). 

5.2.2.2 Ut reference point 

The U^ reference point enables the user to manage information related to his services, such as creation and assignment 
of Public Service Identities, management of authorization policies that are used e.g. by Presence service, conference 
policy management, etc. 

This reference point is in line with the ES 282 007 [4]. 

This reference point is optional (in coherence with WG2 specifications). 

6 The CNG Data Model 

In case of an xDSL access network, the CNG shall support the gateway data model proposed by DSL Forum in TR-098 
(data model for an internet gateway device). 

In order to support IPTV CNDs, the CNG shall be compliant with DSL Forum TR-069 [16] amendment 1 annex F 
(device - gateway association) and in order to solve the NAT traversal problem for ACS initiated session setup the CNG 
shall support the dynamic port mapping creation function as specified in TR-098 [17]. 

In order to support non IMS CND, the CNG shall support the set of parameters defined by DSL Forum in TR-104 [18] 
(data model for VoIP functionalities). 

The data model for cable-based CNG is for further studies. 



Information flows 

NOTE: Information flows section is non normative text reported in form of examples, to better understand the 

relationships between the CPN entities and functionalities. Exhaustive information flows will be given in 
a stage 3 document. 
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7.1 



Attachment flows 



The candidate protocol on e^. is DHCP specified in RFC 2131 [1 1]. In figure 5 the basic information flow is given. 



CND 
CND-AtF 




CNG 
CNG - AtF 






DHCP Discover 








DHCP Offer 






DHCP Request 






DHCP Ack 















Figure 5: CND Attachment on e/ 

In order to mutually exchange the hardware identities between the CND and the CNG, the hardware identity can be 
defined for example as in TR-069 [16] (Deviceld) and the DHCP Option 125 can be used for the CND-CNG association 
as specified in TR-069, annex F [16]. 

7.2 Configuration and management flows 

The following information flow is an example of service provisioning functions supported by CNG (see figure 6). 



CND 
CND-CMF 




CNG 
CNG - CMF 






HTTP GET (Ask Identity) 








200 OK (GET Response) 






HTTP GET (Set Identity) 






200 OK (GET Response) 















Figure 6: Provisioning on e3' 

With the first HTTP GET (Ask Identity), the CND asks the CNG for the Hst of available identities (IMPI, IMPU, etc.), 
and the CNG answers with the identities list in the HTTP GET Response. Then the CND chooses one identity and, in 
the second HTTP GET (Set Identity), provides the choice to the CNG, which then answers with confirmation in the 
HTTP Get Response. 
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7.3 Signalling flows 



The candidate protocol on G^^ is SIP specified in RFC 3261 [8], the protocol on G^^ is SIP specified in 
TS 124 229 [12] and ES 283 003 [5]. 

7.3.1 CND attachment and local/IMS registration 

The non-IMS devices considered in this case are devices associated to the VoIP phone number of the CNG. 
Different kinds of devices are foreseen (see also TS 185 006 [13]), some examples are: 

a) Fixed or Wireless SIP phone. 

b) SIP Multi-mode. 

c) SIP softphone on PC. 

d) Other: playstation, STB, etc. 

These SIP non-IMS devices have a local SIP identity, as defined as local SIP URI (e.g. device_kitchen) or public SIP 
URI (e.g. Johnl23): 

a) Vendor provides a local SIP identity for all SIP devices. This enables "Plug and play" functionality. User does 
not need to configure the SIP device. By default, this local identity can be the MAC address. 

b) User can change the local identity provided by the vendor to another local identity or public SIP URI. The 
customer can change this parameterization, and select a specific name. 

Or a local phone number for each device. 

The attachment phase is: 

1) For non IMS CND's the G^^ reference point is used (for local services), the DHCP server of the CNG will 

return the DHCP option 120 to the CND, standardized to provision CNG SIP proxy IP address or 
domain-name. This option will contain the IP address of the CNG on the CPN side (ex: 192.168.1.1). 

2) The device registers locally to the CNG SIP-IMS proxy (Registrar) using its local SIP URI. SIP REGISTER 
message is sent by the CNG to the NGN with the IMPU of the CNG which maps to the CND local SIP URI. 

3) So as to allow the device to communicate through the NGN, the customer can configure the association 
between the local SIP URI of the device (pre-configured in the device) and the CNG's public IMS identity 
(IMPU), or the device can use its own public SIP URI (pre-configured in the device) to send the register 
through the CNG SIP proxy. 

The authentication is handled directly by the CNG-SIP proxy B2BUA. 
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CND with 
a local Id 



CNG-B2BUA 



IMS Core 
Network 



REGISTER (local SIP URI) 



<4 



Adds Authorization iieader 



REGISTER (//WPA/MPU Aut_header) 



i 401 (Unauthorized) 

(Adds cliallenge response 
i REGISTER (IIVIPI,IIVIPU, response) 



200 OK 



200 (OK) 



Figure 7: Non-IMS capable CND attachment and local/IMS registration 

Other devices shall use their own IMPU (pre-configured in the device) to send the register directly to the NGN proxy. 
This should also be done through the CNG SIP proxy. It should be the case for instance for a nomadic device which 
should be able to register locally at the CNG level as it could use the option 120 not to know its registrar already 
provisioned, but to discover the outbound proxy within the CNG. This would give the opportunity for an IMS device to 
be involved in local SIP communications managed through the CNG SIP Proxy (e.g. call transfer). This case is 
described on figure 8. 



SIP "nomadic" 
device 



CNG SIP proxy 



IMS core 
network 



DHCP with option 120 

(SiP outbound proxy = CNG address) 



REGISTER (IMPU) 


401 


REGISTER (IMPU,IMPI,challenge response) 


200 OK 



REGISTER (IMPU) 



401 



REGISTER (IMPU,IMPI,challenge response) 



200 OK 



Figure 8: IMS capable CND attachment and IMS registration 

NOTE: This scenario is not possible in case of IMS device implementing the AKA authentication mechanisms 
(IPsec tunnel through the CNG). 

7.3.2 Outgoing call 
7.3.2.1 SIP non-IMS CND 

The SIP non-IMS device is provided with a public SIP URI or a local identity, as is the case in figure 9. 



ETSI 



23 



ETSI TS 185 003 V2.0.0 (2008-03) 
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NOTE: The 407 (challenge) is optional. 

Figure 9: Outgoing call for a non-IMS CND 

For SIP non-IMS CND, the CNG SIP proxy can replace the device local SIP URI with its own IMPU in the SIP 
INVITE, in case the CNG IMPU is associated with several CNDs (only one register is sent to the P-CSCF for several 
devices with the same tel number). 



7.3.2.2 
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NOTE: The 407 (challenge) is optional. 

Figure 10: Outgoing call for a IMS CND 
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7.3.3 Internal call 

The CNG SIP proxy can route local call between two devices of the CPN. 

No NGN resource is used to establish internal call. 

SIP signalling is not forwarded to core network and media streams are kept on the CPN directly between endpoints. 

The SIP proxy identifies internal call after the analysis of the called party number. 

The customer can dial: 

a) Directly the local identity of the device (ex: kitchen, dect, John, etc.) 

b) Or a private numbering plan. The commutation table is configurable for instance by the customer on the web 
server of the CNG. 
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Figure 11: Internal call 

7.3.4 Admission Control 

The CNG- Admission Control Function (CNG-ACF) module calculates the available resources on the access line during 
the establishment of a new session, possibly limiting the number of sessions in advance, before the direct intervention 
of the RACS on the NGN side. 

The module is considered as optional (as G^^ and G^^ interfaces related to the SIP proxy). 

The objective is to guaranty the quality of service for each new session and existing sessions previously established. 
The B2BUA extracts from SIP message the SDP offer and announced capabilities (codec audio, video, etc.). 
It asks to the CNG-ACF if announced capabilities are compliant with the available resource. 
The CNG-ACF module returns 3 responses: 
a) OK: 

a) The resource is available for all announced codecs. 

b) The initial SIP message is forwarded without any change on SDP part. 
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b) OK with restriction: 

a) The initial SIP message is modified (incompatible codecs are suppressed from SDP part) and then 
forwarded. 

b) The session can be established with an acceptable codec for network resource. 

c) Not OK: 

a) The B2BUA rejects the session establishment. 
NOTE: The SIP profiles can be different from one side of the B2BUA to another. 
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If the CNG-ACF returns that all announced codecs are compatible with 
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available bitrate, the CNG SIP Proxy modifies the original SDP by 
suppressing these codecs and forwards this modified SIP message 



If no codec is compatible with available bitrate, a SIP 
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Figure 12: Admission Control within the CNG 



7.4 



Remote Access flows 



7.4.1 Remote Access Connection Set-up 



This clause describes one procedure where information of which CND's are registered in the CNG and therefore 
accessible via Remote Access, is retrieved by the remote UE. The UE provides an application linking the procedures for 
Remote Access services. 
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Figure 13: Remote Access Connection Setup 

Prerequisite, the CND in the CPN has to be registered (e.g. using UPnP or similar procedure) to the CNG before the 
following take place: 

1) The remote access menu initiates SIP INVITE to the users home CNG. The request is granted by the IMS NW 
and sent to CNG. 

2) CNG checks if the request shall be granted. It initiates mapping of addresses and ports and prepares for the 
remote access procedures by returning SIP 200 OK. 

Optionally a secure tunnel is then setup between the remote UE and the CNG. 

3) HTTP GET carries (e.g. DLNA or similar procedure) requesting CND information including device types and 
identities to be provided. 

4) CNG checks its present CND registrations, DB info (e.g. DLNA or similar) and returns the CND's device type, 
identity and pointer to CND in HTTP 200 OK. 

5) This session is terminated with SIP BYE. 

The Remote UE now holds the list of available CND's, there identities and types. The end user chooses the CND of 
interest and initiates a new session according to the following. 

6) SIP INVITE is now sent addressing the CND (in the SDP part). The request is granted by the IMS NW and 
sent to the CNG. 

7) CNG checks if the request shall be granted. It initiates mapping of addresses and ports and prepares for the 
remote access procedures by returning SIP 200 OK. Optionally a secure tunnel is then setup between the 
remote UE and the CNG. 

NOTE: This initiated session will be terminated (SIP BYE) in the end of the sequence. 

7.4.2 Download of content using HTTP 

This clause describes the procedure where content is downloaded from a particular CND to the remote UE. The 
information about which CND's are available has been retrieved during the connection setup procedure. The UE 
provides an application linking the procedures for Remote Access services. 
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Prerequisite is the RA Connection set-up procedure displayed in clause 7.4.1: 

1) The Remote UE points out the CND of interest using the path descriptor received under point 4 in clause 7.3.1. 

2) CND sends an acknowledgement back to the Remote UE also indicating where to retrieve additional info. 

3) The Remote UE sends a request (e.g. UPnP or similar) to the CND for additional device and service 
information. 

4) CND responds with information about the services supported in the device. 

5) The Remote UE browses the directories (e.g. with UPnP or similar procedure) where available content for 
download are located and makes a choice. 

6) CND is responding with information (e.g. UPnP or similar) about the content URL/URI. 

7) The Remote UE requests the download of data by addressing the content URL/URI. 

8) The particular file is downloaded to the UE. 

9) The connection is terminated with SIP BYE tearing down the session initiated by SIP INVITE in RA 
Connection setup described in clause 7.3.1, point 6. 

In case of consecutive download requests the first four steps do not need to be repeated if the CND device and service 
information is cached in the Remote UE. 

In the following flows the HTTP protocol is shown as an example although other alternative choices could be 
considered. 
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Figure 14: Download of content using HTTP 
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7.4.3 Upload of content using HTTP 



This clause describes the procedure where content is uploaded to a particular CND from the remote UE. The 
information about which CND's are available has been retrieved during the connection setup procedure. The UE 
provides an application linking the procedures for Remote Access services. 

Prerequisite is the RA Connection Setup procedure in clause 7.4.1: 

1) The Remote UE points out the CND of interest using the path descriptor received under point 4 in 
clause 7.3.1. 

2) CND sends an acknowledgement back to the Remote UE also indicating where to retrieve additional info. 

3) The Remote UE sends a request (e.g. UPnP or similar) to the CND for additional device and service 
information. 

4) CND responds with information about the services supported in the device. 

5) The Remote UE browses the directories where content can be uploaded. 

6) CND is responding with information about the content directory URL/URL 

7) The user selects the folder where content will be uploaded. An object is created for the pending file. 

8) The Object description and URL/URI address is received by Remote UE. 

9) The particular file (object) is uploaded to the CND. 

10) CND is acknowledging the upload of content. 

11) Disconnection is initiated with SIP BYE terminating the session initiated by SIP INVITE in RA Connection 
setup described in clause 7.3.1, point 6. 

In case of consecutive upload requests the first four steps do not need to be repeated if the CND device and service 
information is cached in the Remote UE . 

In the following flows the HTTP protocol is shown as an example although other alternative choices could be 
considered. 
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Figure 15: Upload of content using HTTP 
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